critical10.0
CVE-2013-3454
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default passw…
Impact
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence System Tx9000 | All versions |
| Cisco | Telepresence System Tx9200 | All versions |
| Cisco | Telepresence System Software | Versions 1.9.0\(46\), 1.9.0.1\(3\), 1.9.1\(68\), 1.9.2, 1.9.3, 1.9.4 |
| Cisco | Telepresence System 1300 | All versions |
| Cisco | Telepresence System 1300-65 | All versions |
| Cisco | Telepresence System 3000 | All versions |
| Cisco | Telepresence System 3010 | All versions |
| Cisco | Telepresence System 3200 | All versions |
| Cisco | Telepresence System 3210 | All versions |
| Cisco | Telepresence System 500-32 | All versions |
| Cisco | Telepresence System 500-37 | All versions |